Supply chain β›“ Supply Chain

UK's defence ministry and the Cabinet Office Third-Party Breach (August 2025)

πŸ“… 2025-08-01 🏒 Inflite The Jet Centre Ltd
Primary Source β†—

Incident Details

Cyber-attack on MoD-linked contractor exposes data of Afghans in resettlement scheme. Breach at Inflite The Jet Centre is latest in series of leaks involving private information of Afghan refugees. A contractor linked to the UK Ministry of Defence has been hit by a cyber-attack, exposing personal data linked to Afghan resettlement efforts. It is the latest in a series of breaches involving the private information of Afghan refugees. The breach at Inflite The Jet Centre Ltd, a company that provides ground services for flights linked to the UK’s defence ministry and the Cabinet Office, has exposed the personal data of up to 3,700 people, including Afghans seeking refuge as part of the Afghan Relocations and Assistance Policy. Third-party company: Inflite The Jet Centre Ltd.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Inflite The Jet Centre Ltd
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2025-08-01 Breach occurred
  2. 2025-08-16 Publicly disclosed